Authentication abandoned messages appearing in the Defender Security Server Audit logs after upgrading to Defender 5.11.
E.g.
------------------------------
Tue 02 Dec 2020 12:33:05 Authentication abandoned user user01 Session ID: xxxxxxxx
------------------------------
The Defender Security Server trace also shows the following password error:
------------------------------
adding message Invalid Windows password.
Enter a valid Windows password.
------------------------------
A network packet capture taken on the Defender Security Server also shows an invalid password message:
------------------------------
password verify failed - invalid password Invalid Credentials
------------------------------
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy